blob: e12040afeed85ce6a9510919840b53ce2cfdcfe6 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
###
### VrCore was historically an untrusted_app, but it was moved into its own
### domain to tighten access to VrCore-specific IPC services and
### opportunistically eliminate legacy untrusted_app rules.
###
type vrcore_app, domain;
app_domain(vrcore_app)
net_domain(vrcore_app)
bluetooth_domain(vrcore_app)
# Services from untrusted_app_all.
# Should be kept in sync with untrusted_app_all.
allow vrcore_app audioserver_service:service_manager find;
allow vrcore_app cameraserver_service:service_manager find;
allow vrcore_app drmserver_service:service_manager find;
allow vrcore_app mediaserver_service:service_manager find;
allow vrcore_app mediaextractor_service:service_manager find;
allow vrcore_app mediametrics_service:service_manager find;
allow vrcore_app mediadrmserver_service:service_manager find;
allow vrcore_app nfc_service:service_manager find;
allow vrcore_app radio_service:service_manager find;
allow vrcore_app surfaceflinger_service:service_manager find;
allow vrcore_app app_api_service:service_manager find;
# VrCore-specific services.
allow vrcore_app vr_manager_service:service_manager find;
allow vrcore_app vr_hwc_service:service_manager find;
allow vrcore_app virtual_touchpad_service:service_manager find;
# gdbserver for ndk-gdb ptrace attaches to app process.
allow vrcore_app self:process ptrace;
# Access to /data/media for screenshots.
allow vrcore_app media_rw_data_file:dir create_dir_perms;
allow vrcore_app media_rw_data_file:file create_file_perms;
|
